dgst.c 15.6 KB
Newer Older
1
/* apps/dgst.c */
2
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "apps.h"
63 64 65 66 67 68
#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/evp.h>
#include <openssl/objects.h>
#include <openssl/x509.h>
#include <openssl/pem.h>
69
#include <openssl/hmac.h>
70 71 72 73 74 75 76

#undef BUFSIZE
#define BUFSIZE	1024*8

#undef PROG
#define PROG	dgst_main

B
Ben Laurie 已提交
77
int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
78 79
	  EVP_PKEY *key, unsigned char *sigin, int siglen,
	  const char *sig_name, const char *md_name,
80
	  const char *file,BIO *bmd);
81 82 83

int MAIN(int, char **);

U
Ulf Möller 已提交
84
int MAIN(int argc, char **argv)
85
	{
86
	ENGINE *e = NULL;
87
	unsigned char *buf=NULL;
88
	int i,err=1;
B
Ben Laurie 已提交
89
	const EVP_MD *md=NULL,*m;
90 91
	BIO *in=NULL,*inp;
	BIO *bmd=NULL;
92
	BIO *out = NULL;
93 94
#define PROG_NAME_SIZE  39
	char pname[PROG_NAME_SIZE+1];
95 96
	int separator=0;
	int debug=0;
97
	int keyform=FORMAT_PEM;
98 99
	const char *outfile = NULL, *keyfile = NULL;
	const char *sigfile = NULL, *randfile = NULL;
100
	int out_bin = -1, want_pub = 0, do_verify = 0;
101 102
	EVP_PKEY *sigkey = NULL;
	unsigned char *sigbuf = NULL;
103
	int siglen = 0;
104
	char *passargin = NULL, *passin = NULL;
105
#ifndef OPENSSL_NO_ENGINE
106
	char *engine=NULL;
107
#endif
108
	char *hmac_key=NULL;
109
	char *mac_name=NULL;
B
Ben Laurie 已提交
110
	STACK_OF(STRING) *sigopts = NULL, *macopts = NULL;
111 112 113

	apps_startup();

114
	if ((buf=(unsigned char *)OPENSSL_malloc(BUFSIZE)) == NULL)
115 116 117 118 119 120
		{
		BIO_printf(bio_err,"out of memory\n");
		goto end;
		}
	if (bio_err == NULL)
		if ((bio_err=BIO_new(BIO_s_file())) != NULL)
121
			BIO_set_fp(bio_err,stderr,BIO_NOCLOSE|BIO_FP_TEXT);
122

D
Dr. Stephen Henson 已提交
123 124 125
	if (!load_config(bio_err, NULL))
		goto end;

126
	/* first check the program name */
127
	program_name(argv[0],pname,sizeof pname);
128 129 130 131 132

	md=EVP_get_digestbyname(pname);

	argc--;
	argv++;
B
Bodo Möller 已提交
133
	while (argc > 0)
134 135 136 137
		{
		if ((*argv)[0] != '-') break;
		if (strcmp(*argv,"-c") == 0)
			separator=1;
138 139 140 141 142 143 144 145 146 147 148 149 150 151 152
		else if (strcmp(*argv,"-rand") == 0)
			{
			if (--argc < 1) break;
			randfile=*(++argv);
			}
		else if (strcmp(*argv,"-out") == 0)
			{
			if (--argc < 1) break;
			outfile=*(++argv);
			}
		else if (strcmp(*argv,"-sign") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			}
153 154 155 156 157 158
		else if (!strcmp(*argv,"-passin"))
			{
			if (--argc < 1)
				break;
			passargin=*++argv;
			}
159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176
		else if (strcmp(*argv,"-verify") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			want_pub = 1;
			do_verify = 1;
			}
		else if (strcmp(*argv,"-prverify") == 0)
			{
			if (--argc < 1) break;
			keyfile=*(++argv);
			do_verify = 1;
			}
		else if (strcmp(*argv,"-signature") == 0)
			{
			if (--argc < 1) break;
			sigfile=*(++argv);
			}
177 178 179 180 181
		else if (strcmp(*argv,"-keyform") == 0)
			{
			if (--argc < 1) break;
			keyform=str2fmt(*(++argv));
			}
182
#ifndef OPENSSL_NO_ENGINE
183 184 185 186
		else if (strcmp(*argv,"-engine") == 0)
			{
			if (--argc < 1) break;
			engine= *(++argv);
187
        		e = setup_engine(bio_err, engine, 0);
188
			}
189
#endif
190 191 192 193
		else if (strcmp(*argv,"-hex") == 0)
			out_bin = 0;
		else if (strcmp(*argv,"-binary") == 0)
			out_bin = 1;
194 195
		else if (strcmp(*argv,"-d") == 0)
			debug=1;
196 197 198 199 200 201
		else if (!strcmp(*argv,"-hmac"))
			{
			if (--argc < 1)
				break;
			hmac_key=*++argv;
			}
202 203 204 205 206 207
		else if (!strcmp(*argv,"-mac"))
			{
			if (--argc < 1)
				break;
			mac_name=*++argv;
			}
208 209 210 211 212
		else if (strcmp(*argv,"-sigopt") == 0)
			{
			if (--argc < 1)
				break;
			if (!sigopts)
B
Ben Laurie 已提交
213 214
				sigopts = sk_STRING_new_null();
			if (!sigopts || !sk_STRING_push(sigopts, *(++argv)))
215 216
				break;
			}
217 218 219 220 221
		else if (strcmp(*argv,"-macopt") == 0)
			{
			if (--argc < 1)
				break;
			if (!macopts)
B
Ben Laurie 已提交
222 223
				macopts = sk_STRING_new_null();
			if (!macopts || !sk_STRING_push(macopts, *(++argv)))
224 225
				break;
			}
226 227 228 229 230 231 232 233 234
		else if ((m=EVP_get_digestbyname(&((*argv)[1]))) != NULL)
			md=m;
		else
			break;
		argc--;
		argv++;
		}


235 236 237 238 239
	if(do_verify && !sigfile) {
		BIO_printf(bio_err, "No signature to verify: use the -signature option\n");
		goto end;
	}

240 241 242 243
	if ((argc > 0) && (argv[0][0] == '-')) /* bad option */
		{
		BIO_printf(bio_err,"unknown option '%s'\n",*argv);
		BIO_printf(bio_err,"options are\n");
244 245 246 247 248 249 250
		BIO_printf(bio_err,"-c              to output the digest with separating colons\n");
		BIO_printf(bio_err,"-d              to output debug info\n");
		BIO_printf(bio_err,"-hex            output as hex dump\n");
		BIO_printf(bio_err,"-binary         output in binary form\n");
		BIO_printf(bio_err,"-sign   file    sign digest using private key in file\n");
		BIO_printf(bio_err,"-verify file    verify a signature using public key in file\n");
		BIO_printf(bio_err,"-prverify file  verify a signature using private key in file\n");
251
		BIO_printf(bio_err,"-keyform arg    key file format (PEM or ENGINE)\n");
252
		BIO_printf(bio_err,"-signature file signature to verify\n");
253
		BIO_printf(bio_err,"-sigopt nm:v    signature parameter\n");
254
		BIO_printf(bio_err,"-hmac key       create hashed MAC with key\n");
255
#ifndef OPENSSL_NO_ENGINE
256
		BIO_printf(bio_err,"-engine e       use engine e, possibly a hardware device.\n");
257
#endif
258

A
Andy Polyakov 已提交
259
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm (default)\n",
260
			LN_md5,LN_md5);
A
Andy Polyakov 已提交
261
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
262
			LN_md4,LN_md4);
A
Andy Polyakov 已提交
263
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
264
			LN_md2,LN_md2);
265
#ifndef OPENSSL_NO_SHA
A
Andy Polyakov 已提交
266
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
267
			LN_sha1,LN_sha1);
268
#ifndef OPENSSL_NO_SHA256
A
Andy Polyakov 已提交
269 270 271
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
			LN_sha224,LN_sha224);
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
272 273 274
			LN_sha256,LN_sha256);
#endif
#ifndef OPENSSL_NO_SHA512
A
Andy Polyakov 已提交
275 276 277
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
			LN_sha384,LN_sha384);
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
278 279 280
			LN_sha512,LN_sha512);
#endif
#endif
A
Andy Polyakov 已提交
281
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
282
			LN_mdc2,LN_mdc2);
A
Andy Polyakov 已提交
283
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
284
			LN_ripemd160,LN_ripemd160);
A
Andy Polyakov 已提交
285 286 287 288
#ifndef OPENSSL_NO_WHIRLPOOL
		BIO_printf(bio_err,"-%-14s to use the %s message digest algorithm\n",
			SN_whirlpool,SN_whirlpool);
#endif
D
Typo.  
Dr. Stephen Henson 已提交
289
		goto end;
290
		}
291

292 293 294 295 296 297
	in=BIO_new(BIO_s_file());
	bmd=BIO_new(BIO_f_md());
	if (debug)
		{
		BIO_set_callback(in,BIO_debug_callback);
		/* needed for windows 3.1 */
N
Nils Larsch 已提交
298
		BIO_set_callback_arg(in,(char *)bio_err);
299 300
		}

301 302 303 304 305 306
	if(!app_passwd(bio_err, passargin, NULL, &passin, NULL))
		{
		BIO_printf(bio_err, "Error getting password\n");
		goto end;
		}

307 308 309 310 311 312
	if ((in == NULL) || (bmd == NULL))
		{
		ERR_print_errors(bio_err);
		goto end;
		}

313
	if(out_bin == -1) {
314 315 316 317
		if(keyfile)
			out_bin = 1;
		else
			out_bin = 0;
318 319 320 321 322 323 324 325 326
	}

	if(randfile)
		app_RAND_load_file(randfile, bio_err, 0);

	if(outfile) {
		if(out_bin)
			out = BIO_new_file(outfile, "wb");
		else    out = BIO_new_file(outfile, "w");
327 328
	} else {
		out = BIO_new_fp(stdout, BIO_NOCLOSE);
329
#ifdef OPENSSL_SYS_VMS
330 331 332 333 334 335
		{
		BIO *tmpbio = BIO_new(BIO_f_linebuffer());
		out = BIO_push(tmpbio, out);
		}
#endif
	}
336 337 338 339 340 341 342

	if(!out) {
		BIO_printf(bio_err, "Error opening output file %s\n", 
					outfile ? outfile : "(stdout)");
		ERR_print_errors(bio_err);
		goto end;
	}
343 344 345 346 347
	if ((!!mac_name + !!keyfile + !!hmac_key) > 1)
		{
		BIO_printf(bio_err, "MAC and Signing key cannot both be specified\n");
		goto end;
		}
348

349 350
	if(keyfile)
		{
351
		if (want_pub)
352
			sigkey = load_pubkey(bio_err, keyfile, keyform, 0, NULL,
353
				e, "key file");
354
		else
355
			sigkey = load_key(bio_err, keyfile, keyform, 0, passin,
356 357
				e, "key file");
		if (!sigkey)
358
			{
359 360
			/* load_[pub]key() has already printed an appropriate
			   message */
361
			goto end;
362
			}
363 364
		}

365 366 367 368 369 370 371 372 373
	if (mac_name)
		{
		EVP_PKEY_CTX *mac_ctx = NULL;
		int r = 0;
		if (!init_gen_str(bio_err, &mac_ctx, mac_name,e, 0))
			goto mac_end;
		if (macopts)
			{
			char *macopt;
B
Ben Laurie 已提交
374
			for (i = 0; i < sk_STRING_num(macopts); i++)
375
				{
B
Ben Laurie 已提交
376
				macopt = sk_STRING_value(macopts, i);
377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408
				if (pkey_ctrl_string(mac_ctx, macopt) <= 0)
					{
					BIO_printf(bio_err,
						"MAC parameter error \"%s\"\n",
						macopt);
					ERR_print_errors(bio_err);
					goto mac_end;
					}
				}
			}
		if (EVP_PKEY_keygen(mac_ctx, &sigkey) <= 0)
			{
			BIO_puts(bio_err, "Error generating key\n");
			ERR_print_errors(bio_err);
			goto mac_end;
			}
		r = 1;
		mac_end:
		if (mac_ctx)
			EVP_PKEY_CTX_free(mac_ctx);
		if (r == 0)
			goto end;
		}

	if (hmac_key)
		{
		sigkey = EVP_PKEY_new_mac_key(EVP_PKEY_HMAC, e,
					(unsigned char *)hmac_key, -1);
		if (!sigkey)
			goto end;
		}

409 410 411 412
	if (sigkey)
		{
		EVP_MD_CTX *mctx = NULL;
		EVP_PKEY_CTX *pctx = NULL;
413
		int r;
414 415 416 417 418 419
		if (!BIO_get_md_ctx(bmd, &mctx))
			{
			BIO_printf(bio_err, "Error getting context\n");
			ERR_print_errors(bio_err);
			goto end;
			}
420 421 422 423 424
		if (do_verify)
			r = EVP_DigestVerifyInit(mctx, &pctx, md, e, sigkey);
		else
			r = EVP_DigestSignInit(mctx, &pctx, md, e, sigkey);
		if (!r)
425 426 427 428 429 430 431 432
			{
			BIO_printf(bio_err, "Error setting context\n");
			ERR_print_errors(bio_err);
			goto end;
			}
		if (sigopts)
			{
			char *sigopt;
B
Ben Laurie 已提交
433
			for (i = 0; i < sk_STRING_num(sigopts); i++)
434
				{
B
Ben Laurie 已提交
435
				sigopt = sk_STRING_value(sigopts, i);
436 437 438 439 440 441 442 443 444 445 446 447
				if (pkey_ctrl_string(pctx, sigopt) <= 0)
					{
					BIO_printf(bio_err,
						"parameter error \"%s\"\n",
						sigopt);
					ERR_print_errors(bio_err);
					goto end;
					}
				}
			}
		}
	/* we use md as a filter, reading from 'in' */
448
	else
449
		{
450 451 452 453 454 455 456 457
		if (md == NULL)
			md = EVP_md5(); 
		if (!BIO_set_md(bmd,md))
			{
			BIO_printf(bio_err, "Error setting digest %s\n", pname);
			ERR_print_errors(bio_err);
			goto end;
			}
458 459
		}

460 461 462 463 464 465 466 467 468 469 470 471 472
	if(sigfile && sigkey) {
		BIO *sigbio;
		sigbio = BIO_new_file(sigfile, "rb");
		siglen = EVP_PKEY_size(sigkey);
		sigbuf = OPENSSL_malloc(siglen);
		if(!sigbio) {
			BIO_printf(bio_err, "Error opening signature file %s\n",
								sigfile);
			ERR_print_errors(bio_err);
			goto end;
		}
		siglen = BIO_read(sigbio, sigbuf, siglen);
		BIO_free(sigbio);
473
		if(siglen <= 0) {
474 475 476 477 478 479
			BIO_printf(bio_err, "Error reading signature file %s\n",
								sigfile);
			ERR_print_errors(bio_err);
			goto end;
		}
	}
480 481
	inp=BIO_push(bmd,in);

482 483 484 485 486 487 488
	if (md == NULL)
		{
		EVP_MD_CTX *tctx;
		BIO_get_md_ctx(bmd, &tctx);
		md = EVP_MD_CTX_md(tctx);
		}

489 490 491
	if (argc == 0)
		{
		BIO_set_fp(in,stdin,BIO_NOCLOSE);
B
Ben Laurie 已提交
492
		err=do_fp(out, buf,inp,separator, out_bin, sigkey, sigbuf,
493
			  siglen,NULL,NULL,"stdin",bmd);
494 495 496
		}
	else
		{
497 498
		const char *md_name = NULL, *sig_name = NULL;
		if(!out_bin)
499 500 501 502 503 504 505 506 507 508 509
			{
			if (sigkey)
				{
				const EVP_PKEY_ASN1_METHOD *ameth;
				ameth = EVP_PKEY_get0_asn1(sigkey);
				if (ameth)
					EVP_PKEY_asn1_get0_info(NULL, NULL,
						NULL, NULL, &sig_name, ameth);
				}
			md_name = EVP_MD_name(md);
			}
510
		err = 0;
511 512
		for (i=0; i<argc; i++)
			{
B
Ben Laurie 已提交
513
			int r;
514 515 516 517 518 519
			if (BIO_read_filename(in,argv[i]) <= 0)
				{
				perror(argv[i]);
				err++;
				continue;
				}
B
Ben Laurie 已提交
520 521
			else
			r=do_fp(out,buf,inp,separator,out_bin,sigkey,sigbuf,
522
				siglen,sig_name,md_name, argv[i],bmd);
B
Ben Laurie 已提交
523 524
			if(r)
			    err=r;
B
Bodo Möller 已提交
525
			(void)BIO_reset(bmd);
526 527 528 529 530
			}
		}
end:
	if (buf != NULL)
		{
531
		OPENSSL_cleanse(buf,BUFSIZE);
532
		OPENSSL_free(buf);
533 534
		}
	if (in != NULL) BIO_free(in);
535 536
	if (passin)
		OPENSSL_free(passin);
537
	BIO_free_all(out);
538
	EVP_PKEY_free(sigkey);
539
	if (sigopts)
B
Ben Laurie 已提交
540
		sk_STRING_free(sigopts);
541
	if (macopts)
B
Ben Laurie 已提交
542
		sk_STRING_free(macopts);
543
	if(sigbuf) OPENSSL_free(sigbuf);
544
	if (bmd != NULL) BIO_free(bmd);
545
	apps_shutdown();
546
	OPENSSL_EXIT(err);
547 548
	}

B
Ben Laurie 已提交
549
int do_fp(BIO *out, unsigned char *buf, BIO *bp, int sep, int binout,
550 551
	  EVP_PKEY *key, unsigned char *sigin, int siglen,
	  const char *sig_name, const char *md_name,
552
	  const char *file,BIO *bmd)
553
	{
554
	ssize_t len;
555
	int i;
556

557 558 559
	for (;;)
		{
		i=BIO_read(bp,(char *)buf,BUFSIZE);
B
Ben Laurie 已提交
560 561 562 563 564 565 566
		if(i < 0)
			{
			BIO_printf(bio_err, "Read Error in %s\n",file);
			ERR_print_errors(bio_err);
			return 1;
			}
		if (i == 0) break;
567
		}
568 569 570 571
	if(sigin)
		{
		EVP_MD_CTX *ctx;
		BIO_get_md_ctx(bp, &ctx);
572
		i = EVP_DigestVerifyFinal(ctx, sigin, (unsigned int)siglen); 
B
Ben Laurie 已提交
573 574 575 576 577 578 579
		if(i > 0)
			BIO_printf(out, "Verified OK\n");
		else if(i == 0)
			{
			BIO_printf(out, "Verification Failure\n");
			return 1;
			}
580 581 582 583
		else
			{
			BIO_printf(bio_err, "Error Verifying Data\n");
			ERR_print_errors(bio_err);
B
Ben Laurie 已提交
584
			return 1;
585
			}
B
Ben Laurie 已提交
586
		return 0;
587 588 589 590 591
		}
	if(key)
		{
		EVP_MD_CTX *ctx;
		BIO_get_md_ctx(bp, &ctx);
D
Dr. Stephen Henson 已提交
592
		len = BUFSIZE;
A
Andy Polyakov 已提交
593
		if(!EVP_DigestSignFinal(ctx, buf, &len)) 
594 595 596
			{
			BIO_printf(bio_err, "Error Signing Data\n");
			ERR_print_errors(bio_err);
B
Ben Laurie 已提交
597
			return 1;
598 599 600
			}
		}
	else
601
		{
602
		len=BIO_gets(bp,(char *)buf,BUFSIZE);
603 604 605 606 607 608
		if (len <0) 
			{
			ERR_print_errors(bio_err);
			return 1;
			}
		}
609

610 611
	if(binout) BIO_write(out, buf, len);
	else 
612
		{
613
		if (sig_name)
614
			BIO_printf(out, "%s-%s(%s)= ", sig_name, md_name, file);
615
		else if (md_name)
616
			BIO_printf(out, "%s(%s)= ", md_name, file);
617
		else
618
			BIO_printf(out, "(%s)= ", file);
619
		for (i=0; i<(int)len; i++)
620 621 622 623 624 625
			{
			if (sep && (i != 0))
				BIO_printf(out, ":");
			BIO_printf(out, "%02x",buf[i]);
			}
		BIO_printf(out, "\n");
626
		}
B
Ben Laurie 已提交
627
	return 0;
628 629
	}